ReviewOS

also looking at this

stacks/ts-xml

chore(deps): update all non-major dependencies

#342
Closed chris wants to merge buddy-bot/update-non-major-updates into main
2 files +25 -13
9 days ago

This PR contains the following updates:

Package Updates Summary

TypeCount
📦 NPM Packages3
Total3

📦 npm Dependencies

npm

3 packages will be updated

PackageChangeAgeAdoptionPassingConfidence
fast-xml-parser (source)5.5.3 -> 5.7.1ageadoptionpassingconfidence
sax (source)1.5.0 -> 1.6.0ageadoptionpassingconfidence
@types/bun (source)1.3.10 -> 1.3.12ageadoptionpassingconfidence

Release Notes

NaturalIntelligence/fast-xml-parser (fast-xml-parser)

5.5.3 -> 5.7.1

v5.7.1

Compare Source

  • Use @nodable/entities v2.1.0
    • breaking changes
      • single entity scan. You're not allowed to use entity value to form another entity name.
      • you cant add numeric external entity
      • entity error message when expantion limit is crossed might change
    • typings are updated for new options related to process entity
    • please follow documentation of @nodable/entities for more detail.
    • performance
      • if processEntities is false, then there should not be impact on performance.
      • if processEntities is true, but you dont pass entity decoder separately then performance may degrade by approx 8-10%
      • if processEntities is true, and you pass entity decoder separately
        • if no entity then performance should be same as before
        • if there are entities then performance should be increased from past versions
    • ignoreAttributes is not required to be set to set xml version for NCR entity value
  • update 'fast-xml-builder' to sanitize malicious CDATA and comment'...

[View full release notes]

Released by amitguptagwl on 4/17/2026

v5.6.0

Compare Source

  • No API change
  • No change in performance for basic usage
  • No typing change
  • No config change
  • new dependency
  • breaking: error messages for entities might have been changed.

Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.5.12...v5.6.0

Released by amitguptagwl on 4/15/2026

v5.5.9

Compare Source

combine typings file to avoid configuration changes pass readonly instance of matcher to the call backs to avoid accidental push/pop call

Released by amitguptagwl on 3/26/2026

isaacs/sax-js (sax)

1.5.0 -> 1.6.0

Compare Source

An evented streaming XML parser in JavaScript

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

DefinitelyTyped/DefinitelyTyped (@types/bun)

1.3.10 -> 1.3.12

Compare Source

TypeScript definitions for bun

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog


📊 Package Statistics

  • fast-xml-parser: 71,662,988 weekly downloads
  • sax: 69,844,125 weekly downloads
  • @types/bun: 6,594,322 weekly downloads

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Buddy 🤖

2 changed files on the files tab, with 0 review threads.

Sign in to comment on this pull request.